Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/4gqehhsoDhO5MZjshwceB9uJ6SY.roa
File: 4gqehhsoDhO5MZjshwceB9uJ6SY.roa (raw, json)
Hash identifier: rnfmfrAawRhPNgktZKaWz5m9xij8P5AFUolfXjC6qWM=
Subject key identifier: E2:0A:9E:86:1B:28:0E:13:B9:31:98:EC:87:07:1E:07:DB:89:E9:26
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018239E0166E8B038FA4E7DBBC2D493BD058
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/4gqehhsoDhO5MZjshwceB9uJ6SY.roa
Signing time: Tue 26 Jul 2022 09:39:23 +0000
ROA not before: Tue 26 Jul 2022 09:39:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210876
IP address blocks: 194.35.40.0/24 maxlen: 24
45.134.84.0/23 maxlen: 23
45.134.84.0/22 maxlen: 24
45.147.116.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:39:e0:16:6e:8b:03:8f:a4:e7:db:bc:2d:49:3b:d0:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jul 26 09:39:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e20a9e861b280e13b93198ec87071e07db89e926
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:2b:36:bc:c6:f8:eb:93:09:36:55:9f:61:27:
f0:1f:2a:17:60:22:1d:4d:ff:1a:72:4a:f3:b0:3c:
38:1c:9e:49:df:ea:06:22:5a:50:8c:33:8e:01:7e:
be:76:92:e5:5e:7d:1c:bf:b0:c0:98:55:b5:74:f1:
2a:15:c0:89:f4:88:60:3b:68:c0:7e:ff:a1:19:65:
49:28:d7:28:28:f2:0d:78:23:48:66:28:0b:c9:f4:
de:db:89:78:db:51:74:22:c1:e9:6e:bb:d9:ef:7c:
fc:78:7e:73:06:08:f8:28:12:9d:ce:3f:32:b2:20:
2f:cb:21:e5:76:fd:14:bd:07:dc:5e:92:25:05:10:
9a:65:a3:42:28:2e:85:c2:1a:6d:7e:38:fa:3a:a7:
15:6e:3f:1b:8d:0b:59:97:78:ec:f6:a8:c2:e3:06:
e2:af:4d:b3:81:ac:99:78:d3:83:74:f9:20:c0:c5:
16:c8:a0:85:c8:4a:bb:d4:f9:3f:84:aa:68:76:c9:
a2:4a:fa:96:12:55:b7:77:df:2d:95:17:9b:5a:1b:
67:20:55:5e:9f:19:c2:f2:47:04:e8:fc:79:53:42:
92:b8:6d:81:5e:3c:ca:01:d4:fa:bc:a5:21:8f:2c:
eb:74:56:1a:65:e1:50:45:9a:43:81:66:c2:ef:bb:
d5:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:0A:9E:86:1B:28:0E:13:B9:31:98:EC:87:07:1E:07:DB:89:E9:26
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/4gqehhsoDhO5MZjshwceB9uJ6SY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.134.84.0/22
45.147.116.0/22
194.35.40.0/24
Signature Algorithm: sha256WithRSAEncryption
21:45:e0:9b:51:f8:28:eb:72:30:8b:57:73:49:50:77:f4:1f:
70:bd:e1:c7:6f:ca:20:c9:9e:ea:2a:18:11:68:20:64:6d:c0:
9e:1c:f5:43:b6:87:75:84:5c:b2:91:a6:97:b4:59:d3:66:1d:
57:07:a0:b3:1d:ff:76:80:92:79:59:2a:aa:cc:89:ef:ff:47:
be:43:96:75:be:60:7b:af:a1:24:0c:12:45:1c:7e:4a:27:af:
a7:6d:9c:73:d8:ee:03:ab:bf:af:61:fa:17:3a:63:c9:53:17:
e8:fa:74:3d:e4:17:32:2b:3c:ef:d5:17:74:4f:d8:ad:73:d0:
49:27:27:e8:6b:0f:bf:42:3b:3e:17:cd:9f:41:29:e0:80:37:
94:0c:20:0e:ad:0d:b7:8b:78:c7:c0:bb:d0:ce:c1:f4:f0:be:
26:bf:78:e0:22:8e:f4:e8:4f:49:4f:26:13:0c:5c:62:f2:26:
2a:e8:0b:82:9d:d1:1d:91:a8:37:01:1a:a5:a7:ad:c6:13:7c:
3f:31:49:e6:5a:d4:4f:3c:30:32:c1:fc:e3:99:7e:b8:f0:5c:
30:0d:8e:a8:b0:bc:99:5c:26:be:74:dd:c4:1d:f9:7b:f3:d1:
fb:8b:92:2d:94:a5:5f:b6:5d:b0:07:76:54:89:02:5d:44:9f:
b6:de:b5:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:40 2024 by rpki-client on console-fra.rpki-client.org